Replace upstream "FIPS mode" with more fine-grained TLS hostname verification options #829

#760 was closed now that FIPS mode is on by default, disabling all ZK-specific TLS verification. That's a pretty blunt tool, so we opened apache/zookeeper#2173 to add a more fine-grained option to control what we need. If that is merged then we should integrate it on our end.